Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2006-0030

42
FAUCET Score

CVE-2006-0030 describes an unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, as well as Microsoft Office 2000 SP3, allowing for arbitrary code execution. This user-assisted attack vector involves a specially crafted Excel file containing a malformed graphic, leading to memory corruption. The vulnerability carries a CVSS score of 5.1, indicating a network-based attack with high access complexity and partial impact on confidentiality, integrity, and availability. While there is an ExploitDB entry (EDB-27055) for a similar issue in older Excel versions, there is no evidence of active exploitation, Metasploit modules, or significant community discussion for this specific CVE.

Impacted Technologies

VendorProductVersion(s)CPE
2000CPE matchmatch criteria
cpe:2.3:a:microsoft:excel:2000:*:*:*:*:*:*:*
2002CPE matchmatch criteria
cpe:2.3:a:microsoft:excel:2002:*:*:*:*:*:*:*
2003CPE matchmatch criteria
cpe:2.3:a:microsoft:excel:2003:*:*:*:*:*:*:*
2004CPE matchmatch criteria
cpe:2.3:a:microsoft:excel:2004:*:mac_os_x:*:*:*:*:*
xCPE matchmatch criteria
cpe:2.3:a:microsoft:excel:x:*:mac_os_x:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

5.1MEDIUM

AV:N/AC:H/Au:N/C:P/I:P/A:P

Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Exploitability Score
4.9
Impact Score
6.4
CvssVersion
2.0

Exploit Intelligence

EPSS Score
39.59%
Probability of exploitation in next 30 days
EPSS Percentile
98.5%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
ExploitDB: EDB-27055 · Jan 9, 2006
This CVE's current EPSS score of 0.3959 is in the 99th percentile among its peer group of 19,958 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Remediation records are not available for this CVE.

References

docs.microsoft.com / en-us/security-updates/securitybulletins/2006/ms06-012
secunia.com / advisories/19138
PatchVendor Advisory
secunia.com / advisories/19238
Vendor Advisory
securitytracker.com / id
Patch
exchange.xforce.ibmcloud.com / vulnerabilities/25229
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1401
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1510
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1630
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1666
support.avaya.com / elmodocs2/security/ASA-2006-069.htm
kb.cert.org / vuls/id/123222
Third Party AdvisoryUS Government Resource
osvdb.org / 23901
securityfocus.com / bid/16181
us-cert.gov / cas/techalerts/TA06-073A.html
Third Party AdvisoryUS Government Resource
vupen.com / english/advisories/2006/0950
Vendor Advisory